1 files changed, 23 insertions, 0 deletions
diff --git a/ansible/roles/borg-server/tasks/main.yml b/ansible/roles/borg-server/tasks/main.yml
new file mode 100644
index 0000000..9ef5635
--- /dev/null
+++ b/ansible/roles/borg-server/tasks/main.yml
@@ -0,0 +1,23 @@
+- name: authorized_keys
+  with_dict: "{{ borg_clients }}"
+  authorized_key:
+    user: borg
+    manage_dir: False
+    state: "{{ item.value.state }}"
+    key: "{{ borg_ssh_keys[item.key].public }}"
+    path: "{{ borg_basedir }}/.ssh/authorized_keys2"
+    key_options: "command=\"cd {{ borg_basedir }}/repos; borg serve --append-only --restrict-to-path {{ borg_basedir }}/repos/{{ item.key }}\",no-port-forwarding,no-X11-forwarding,no-pty,no-agent-forwarding,no-user-rc"
+
+- name: mkdir repos
+  file:
+    path: "{{ borg_basedir }}/repos"
+    state: directory
+    mode: u=rwx,go=
+    owner: borg
+    group: borg
+
+#- name: mkdir repos/{{ item.key }}
+#  with_dict: "{{ borg_clients }}"
+#  file:
+#    path: "{{ borg_basedir }}/repos"
+#    state: directory